users.acl中的sentinel_user在redis 7中不使用受限权限

6ss1mwsb 于 8个月前发布在 Redis

关注(0)|答案(1)|浏览(115)

我正在尝试在users.acl文件中设置sentinel_user acl用户，该用户仅具有运行与sentinel相关的命令的有限权限。
我试着在redis documentaion下面设置这个用户：

ACL SETUSER sentinel_user ON nopass allchannels +multi +slaveof +ping +exec +subscribe +config|rewrite +role +publish +info +client|setname +client|kill +script|kill

但是我在启动sentinel_user时遇到了问题，因为它说# Aborting Redis startup because of ACL errors：Error in applying operation '+script|kill': Unknown command or category name in ACL
完整错误日志：

052811:X 25 Jul 2023 15:01:06.354 # Aborting Redis startup because of ACL errors: /home/somepath/redis-centinal-poc/redis-7.0.11/users.acl:6: Error in applying operation '+script|kill': Unknown command or category name in ACL. /home/somepath/redis-centinal-poc/redis-7.0.11/users.acl:6: Error in applying operation '+exec': Unknown command or category name in ACL. /home/somepath/redis-centinal-poc/redis-7.0.11/users.acl:6: Error in applying operation '+multi': Unknown command or category name in ACL. /home/somepath/redis-centinal-poc/redis-7.0.11/users.acl:6: Error in applying operation '+config|rewrite': Unknown command or category name in ACL. /home/somepath/redis-centinal-poc/redis-7.0.11/users.acl:6: Error in applying operation '+slaveof': Unknown command or category name in ACL. WARNING: ACL errors detected, no change to the previously active ACL rules was performed

redis

来源：https://stackoverflow.com/questions/76761389/sentinel-user-in-users-acl-not-working-with-limited-permission-in-redis-7

1条答案

按热度按时间

lyr7nygr1#

您尝试创建的用户必须在Redis示例中创建，而不是在Sentinel示例中创建。
有两个用户与Sentinel相关：

与Redis通信的用户。必须在所有Redis示例中创建此用户。范例：

acl setuser sentinel_to_redis on >"sentinelredis123" allchannels +multi +slaveof +ping +exec +subscribe +config|rewrite +role +publish +info +client|setname +client|kill +script|kill

一个与其他哨兵通讯的用户。必须在所有Sentinal示例中创建此用户。范例：

acl setuser sentinel_to_sentinel on >"sentinelsentinel123" allchannels +@all

创建用户后，您必须在所有Sentinal示例中对其进行配置。在运行时执行此操作的示例：

sentinel set <MASTER_NAME> auth-user sentinel_to_redis
sentinel set <MASTER_NAME> auth-pass "sentinelredis123"
sentinel config set sentinel-user sentinel_to_sentinel
sentinel config set sentinel-pass "sentinelsentinel123"

赞(0）回复(0）举报 8个月前

我来回答

users.acl中的sentinel_user在redis 7中不使用受限权限

1条答案

相关问题

热门标签

最新问答